sympozium-ai/celln

agent runtime security - zero trust, zero setup, zero latency agent sandboxing

Give any AI agent its own disposable Linux machine. Firecracker microVM sandboxing with millisecond boot times, full network access, and native MCP support.

A local-first microVM sandbox for running AI agents safely on macOS & Linux

Run AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with default-deny Dogwood policies and credential injection that keeps secrets outside the agent. Written in Rust. Supports macOS on Apple silicon, with Linux support planned.

Give your agent a shell without giving it the keys to your machine.

OpenShell is the safe, private runtime for autonomous AI agents.

Run AI coding agents in secure, isolated microVMs. Sub-125ms boot times, real hardware isolation.

Lightweight and declarative sandboxing for AI agents on Linux and macOS using Nix.

Open-source agent runtime — SSH-native isolation, eBPF egress policy, Kubernetes + LXC backends, GPU passthrough, MCP-native CLI